← Back

Solstice

solstice

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Solstice Internet Mail Server
solstice_internet_mail_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-1682
1Solstice
1Solstice Internet Mail Server
Apr 16, 2026
May 20, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated user...Show more
JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter. NOTE: Sun disputes this issue, stating "The report makes references to source code and files that do not exist in the mentioned products.Show less